Welcome to Cisco Orbital

Cisco Orbital (“Orbital”) is a new service that adds Osquery to AMP for Endpoints (AMP4E) to support detailed and fast queries for incident responders. Orbital is available to AMP Advantage customers and currently supported on 64-bit Windows 10 hosts running Version 1703 (Creators Update) or later.

About:

• What is Orbital? – What is Cisco Orbital and how can you use it?
• How Do I Get Orbital? – How can you get Orbital?
• Requirements – What do you need to use Cisco Orbital?
• Quick Start – How do you use Orbital to query AMP endpoints?
• Orbital APIs – How to write applications that use Orbital.

User Interface:

• Query – Using the Orbital Query interface to submit queries and create jobs.
• Jobs – Using the Orbital Jobs interface to manage queries and view results.
• Assets – Using the Orbital Assets interface to examine endpoints.
• Catalog – Using the Orbital Catalog to find queries designed by Cisco to search and investigate.

Support:

• Alerts, Errors, Warnings – What errors could you see from Orbital?
• Troubleshooting – How can you fix issues with using Orbital?
• FAQ – Frequently Asked (or Anticipated) Questions about Cisco Orbital.
• Glossary – Terms specific to Orbital.